Dragonoa Online: Privacy Policy

Last updated: 21 October 2026

This policy explains what information the game Dragonoa Online (Android package com.dragonoa.online) collects, why, and what you can do about it. The game is made by an independent developer in the Netherlands. Questions and requests: okimuru@gmail.com.

What we collect

• Your account: the username and email address you register with, and your password. The password is stored only in hashed form.
• Your game data: your characters and their names, level, items, gold, gems, quests, progress and rankings, and the social parts of the game: party, guild, friends, blocked players, mail and trades with other players.
• Chat: messages you send in Global, Party, Guild and Whispers are delivered by our server to the players they are meant for. The server keeps each player's last messages in memory for up to 30 minutes so that abuse can be reported, and shows the last minute of Global and Guild chat to players who log in. Chat is not saved otherwise. When a player reports another player, the report stores the reported player's recent messages that the reporting player received, so a moderator can check it.
• Technical data: the IP address your phone connects from (needed to connect, and written in our server logs), the game version, and while you play, the frame rate and phone temperature every 30 seconds. After a dropped connection the game sends the warnings and errors it saw just before, to help us fix it.

We do not request access to your contacts, photos, personal files or precise device location. We do not receive your card or bank details. Optional rewarded advertising and Google Play purchases are described below.

Optional rewarded videos and purchases

Where enabled, you can choose to watch a Google AdMob rewarded video for one Premium Token, up to five verified videos per account per UTC day. Watching ads is optional. Google's advertising SDK may process your IP address (including an approximate location inferred from it), device or advertising identifiers, ad interactions, and diagnostic information to deliver and measure ads and prevent fraud. Where required, Google's consent form lets you accept, reject or manage these choices before ads are requested. You can revisit them in Store > Rewards > Ad privacy. See Google's Privacy Policy and how Google uses information from partner apps.

Our server sends a random, temporary reward ticket through the ad SDK. Google returns a signed completion event. We record the ticket, transaction identifier, time and reward against your game account to enforce the daily limit and prevent duplicate or forged rewards. Your game password and email are not included in that ticket.

Google Play processes paid token packs. Our server receives a purchase token and verified product, quantity, purchase/consumption/refund status and a random account binding. We use these to deliver tokens once, recover interrupted purchases and apply refunds. Google handles payment information; it is not sent to our game server.

Why we use it

• To run the game and your account (this is the service you ask for).
• To keep the game fair and safe: to stop cheating, spam and abuse, and to handle reports.
• To find and fix crashes, lag and other problems.

Under the GDPR we rely on the contract with you (providing the game) and on our legitimate interest in a safe, working game.

Who we share it with

We do not sell or rent your account data. Google and advertising partners process the advertising data described above according to your applicable consent choices. Your game data is stored on servers run for us by our hosting provider in the European Union. Other players see what the game shows them: your character's name, appearance, level and your chat messages. We disclose data only if the law requires it.

How long we keep it

• Account and game data: as long as your account exists.
• Chat: up to 30 minutes in server memory, as described above. Reports and the messages saved with them: up to 12 months.
• Server logs: for a limited time, normally no longer than 30 days.
• Backups of our databases are kept for up to 30 days, after which deleted data is gone from them too.
• Reward sessions and wallet data are removed with your account. Purchase receipts and random purchase-account bindings are retained separately to prevent receipt reuse and handle outstanding purchases or refunds.

Deleting your account

In the game: open Settings (the gear, top right), tap Delete account and type DELETE. Your login stops working at once and your account and all its characters are deleted within minutes. If you cannot log in, see Delete your Dragonoa Online account.

Your rights

You can ask us for a copy of your data, to correct it, to delete it or to stop a use you object to. Write to okimuru@gmail.com from the email address of your account. You can also complain to your data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

Children

Dragonoa Online is not meant for children under 13 and we do not knowingly collect data from them. If you believe a child under 13 has an account, contact us and we will delete it.

Security

Passwords are stored hashed and access to our servers is restricted. The game's connection is not encrypted yet, so please do not use a password that you also use somewhere else.

Changes

When this policy changes we update the date at the top of this page.